{"action":"Upgrade grpc to 1.24.4 or later.","affected":[{"fixed":"1.24.4","introduced":"0"}],"component":"grpc","cve_ids":["CVE-2020-7768"],"ecosystem":"npm","epss":0.04026,"exploited":false,"fixed_versions":["1.24.4"],"ghsa_id":"GHSA-pp75-xfpw-37g9","id":"tcs_01M5KG43AVN2YC8775WBPZZTY3","modified_at":"2025-01-14T08:57:34.513174Z","published_at":"2021-05-10T19:16:14Z","references":["https://osv.dev/vulnerability/GHSA-pp75-xfpw-37g9","https://nvd.nist.gov/vuln/detail/CVE-2020-7768","https://github.com/grpc/grpc-node/pull/1605","https://github.com/grpc/grpc-node/pull/1606","https://github.com/grpc/grpc-node/releases/tag/grpc%401.24.4","https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-1038819","https://snyk.io/vuln/SNYK-JS-GRPC-598671","https://snyk.io/vuln/SNYK-JS-GRPCGRPCJS-1038818","https://www.npmjs.com/package/@grpc/grpc-js","https://www.npmjs.com/package/grpc"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-pp75-xfpw-37g9","url":"https://osv.dev/vulnerability/GHSA-pp75-xfpw-37g9"}],"summary":"Prototype pollution in grpc and @grpc/grpc-js"}